openstack
/
tripleo-heat-templates
Code Issues Proposed changes

Set ipc=host for services attaching encrypted volumes 

Without ipc=host set, cryptsetup/devicemapper will never
see devices created when running "cryptsetup luksOpen",
causing the command to hang.

This is required for attaching encrypted Cinder volumes.

Closes-Bug: #1729419
Change-Id: Ic7184b1fbbafea266f8ec1e7974d0a4a2cf4d750
This commit is contained in:
Eric Harney 2017-11-01 15:47:01 -04:00 committed by Emilien Macchi
parent 24f859c018
commit 05b6147246
2 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
docker/services/cinder-volume.yaml
View File

@ -125,6 +125,7 @@ outputs:
step_4:
cinder_volume:
image: *cinder_volume_image
ipc: host
net: host
privileged: true
restart: always

1
docker/services/nova-compute.yaml
View File

@ -115,6 +115,7 @@ outputs:
step_4:
nova_compute:
image: &nova_compute_image {get_param: DockerNovaComputeImage}
ipc: host
net: host
privileged: true
user: nova